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1.-4. (canceled) 

5. (currently amended) A virtual private network construction system for a public 
data communication network comprising: 

first relaying apparatuses fe^generating and multicasting , when starting a 
construction of a virtual network within the public data communication network, control 
packets each having sc t of which contains a multicast address predetermined per virtual 
network for constructing a virtual private network , and 

second relaying apparatuses fe^establishing virtual links to the first relaying 
apparatuses which are transmitting sources of the control packets upon receipt thereof and for 
returning reply packets through the virtual links, 

whereby the virtual links are established between all pairs of virtual relaying 
structures included and independently operable per virtual private n etwork in the first and the 
second relaying apparatuses by operations thereof to construct the virtual private networks 
that is -are p reliminarily associated with the virtual relaying structures , the virtual relaying 
structures being provided with receiving virtual interfaces and belonging to a multicast 
address group represented by the multicast address. 

6. (currently amended) The virtual private n etwork construction system as claimed 
in claim 5 wherein the second relaying apparatuses establishing the virtual links authenticate 
the control packets received. 

7. (currently amended) The virtual private n etwork construction system as claimed 
in claim 5 wherein the virtual links comprise IP tunnels. 
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8. (currently amended) The virtual private n etwork construction system as claimed 
in claim 5 wherein the virtual links comprise MPLS tunnels. 

9. (currently amended) A relaying apparatus, which terminates ar-virtual private 
networks within a public data communication network comprising: 

virtual relaying structures that are preliminarily associated with the virtual private 
networks and independently operable per virtual private network, 

means fe^generating and multicasting control packets each having se t of which 
contains a multicast address predetermined per virtual networ k for constructing a virtual 
private network , and 

means fer-establishing virtual links to other relaying apparatuses which are 
transmitting sources of the control packets upon receipt thereof and for returning reply 
packets through the virtual links, 

whereby the virtual links are established between all pairs of virtual relaying 
structures in different relaying apparatuses to construct the virtual private network, the virtual 
relaying structures being provided with receiving virtual interfaces and belonging to a 
multicast address group represented by the multicast address. 

10. (original) The relaying apparatus as claimed in claim 9, further comprising means 
for authenticating the control packets received. 

11. (original) The relaying apparatus as claimed in claim 9, further comprising means 
for generating a routing table for each of a plurality of virtual networks logically independent 

84247220_1 


Serial No. 09/988,958 

Page 4 of 7 

of one another, and means for performing a packet relay of each virtual network based on the 
routing table. 

12. (original) The relaying apparatus as claimed in claim 9 wherein the virtual links 
comprise IP tunnels. 

13. (original) The relaying apparatus as claimed in claim 9 wherein the virtual links 
comprise MPLS tunnels. 
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